Q33 Key Vault Domain 4 · 20–25% of exam

A Key Vault certificate is configured with auto-renewal. Which certificate authority types support integrated auto-renewal in Key Vault?

  1. A Any CA
  2. B Only self-signed certificates
  3. C DigiCert and GlobalSign (integrated CAs) plus self-signed (correct answer)
  4. D Azure-managed certificates only

Shortcut: Key Vault integrates with DigiCert and GlobalSign for automated certificate renewal. Self-signed certs also auto-renew. For other CAs, use the CSR-based manual workflow.